TrainShield: Targeted Awareness for Cybersecurity Training

In recent years, cybersecurity threats have increasingly exploited human behaviour rather than purely technical vulnerabilities, exposing the limits of traditional awareness programmes delivered outside real-world contexts. To bridge this gap, we introduce TrainShield, an interaction paradigm for...

EUVD-2024-37899

Malicious code in bioql PyPI...

CVE-2024-39326

SkillTree (before version 2.12.6) is affected by a CSRF vulnerability in the POST-capable endpoint /admin/projects/{projectname}/skills/{skillname}/video (and likely others). The issue arises because the endpoint lacks CSRF mitigations (no SameSite cookie flag or CSRF token) and can perform state...